buffer overrun detected! program:\??\c:\windows\system32\winlogon.exe

I get the error in the title

"Buffer overrun detected!

program:\??\c:\windows\system32\winlogon.exe

A buffer overrun has been detected which ahs corrupted the program's internal state. The program cannot safely continue execution and must now be terminated."

when starting windows, just before the ordinary log in screen would appear. I have the option to click okay, and then the system reboots.

I have pulled the drive and run a full chkdsk /r, no problems found. I have run three separate virus scans with no viruses found. Visual inspection makes windows look in tact and healthy. I tried a repair install and it did not change anything. I also tried a reimage that did not change anything. I can't boot into any version of windows (safe mode, directory services repair, etc)

Anybody have any idea about this error, or how to get rid of it?
zoogelsnofAsked:
Who is Participating?

[Webinar] Streamline your web hosting managementRegister Today

x
 
souseranConnect With a Mentor Commented:
Did you happen to have SUPERAntiSpyware on the affected drive? Can you run HiJackThis while the drive is slaved to another, and do you find an entry for *.superantispyware\SASWINLO.dll If so, can you rename the SASWINLO.dll file and does that allow you to log on to the drive?
0
 
zoogelsnofAuthor Commented:
That worked perfectly! How did you know?
0
 
zoogelsnofAuthor Commented:
Perfect!
0
Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

 
souseranCommented:
Glad to help. :-)

Q. How did you know?

A. LOL. Expert secret.

It appears you're running an older version of SUPERAntiSpyware. Now that the system is working again, you may want to uninstall it. I'd recommend Revo Uninstaller in Advanced Mode and clear out all the associated Files, Folders, and Registry entries. Be sure to check manually that all the old program files are gone. You can download Revo Uninstaller here:

http://www.revouninstaller.com/download/revosetup.exe

Then install the newest version of SUPERAntiSpyware. You can download it here:

http://downloads.superantispyware.com/downloads/SUPERAntiSpyware.exe

Be sure to update the data files.

0
 
boatcomputerCommented:
Very impressed.
Again Microsoft don't give you a clue to the real problem.
Thanks again
0
 
blxcomputersCommented:
AWESOME!! Thank you so much. I just wanted to add a comment to say thank you, and to post a work around option.

Here is what I had to do:
The answer posted above is 100% accurate.  I did not have a different drive to slave it from, so I booted using the "ultimate boot disk" CD. I then went into a "DOS" prompt. I naviagted from there to the progra~1\supera~1 directory. I pulled a dir/p and found my file! I then used the standard renaming procedure and renamed it SASWINLO.old  rebooted the machine....bang worked like a charm. Thanks again for your assistance! You saved me HOURS!!
0
 
SocalScoutCommented:
How are you able to run all those diagnostics? I have created boot disks, run Norton Antivirus from the CD,  and I still cannot access the command prompt or anything. It just takes me back to the logon where the above error occurrs.

Thanks


0
All Courses

From novice to tech pro — start learning today.